Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gypDO1V4H4tFeiZUMXVJKb1wbX4.roa
File: gypDO1V4H4tFeiZUMXVJKb1wbX4.roa (raw, json)
Hash identifier: jO19tTrWPFJ5a1QX/LihIuSdzJilCePA7WUvAbAO/Uk=
Subject key identifier: 83:2A:43:3B:55:78:1F:8B:45:7A:26:54:31:75:49:29:BD:70:6D:7E
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0A3F6AEB1BA15836C001C1BFD4C07C4D5
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gypDO1V4H4tFeiZUMXVJKb1wbX4.roa
Signing time: Tue 15 Sep 2026 07:27:27 +0000
ROA not before: Tue 15 Sep 2026 07:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.76.128.0/24 maxlen: 24
87.76.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:f6:ae:b1:ba:15:83:6c:00:1c:1b:fd:4c:07:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 15 07:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=832a433b55781f8b457a265431754929bd706d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:ca:dd:9a:70:2f:d4:bc:83:6a:8f:ce:a7:
ef:a7:07:3e:fd:49:c7:39:6b:20:89:0b:06:c4:13:
ba:cc:e1:be:bc:75:1e:6a:7e:2c:b4:f8:18:29:1a:
7f:9f:ed:ce:01:52:33:dc:b9:ba:03:69:39:3d:24:
a4:e6:e3:1c:ee:a9:ff:d5:59:a0:cb:ac:11:bc:25:
1f:2c:d7:1e:78:ff:f1:03:6d:7b:28:2d:e1:37:ad:
8a:b2:1e:70:98:47:fb:73:65:67:58:ce:30:45:98:
9b:89:af:b8:3a:0a:ac:04:bd:6f:2b:77:c7:6f:b9:
14:8c:cc:fe:bd:58:da:8c:5e:bd:4b:c2:57:a1:26:
53:e8:78:31:6a:76:37:9a:11:04:9b:4b:c1:67:1a:
1b:9c:48:ab:6e:8f:60:f3:aa:2a:08:fd:8a:9e:76:
cc:89:4a:f8:d1:b2:bb:d2:cf:de:b1:52:29:5e:68:
c5:c8:ad:ba:81:c1:4d:66:90:b5:2b:72:79:d6:ec:
51:4c:1f:04:17:b5:f7:4b:94:4b:ce:e8:e8:14:3f:
4e:0e:55:38:57:08:97:cd:5d:7e:4d:33:e5:1e:20:
62:5b:5d:d3:d9:da:0a:90:0e:0c:75:36:2f:9d:87:
23:05:e8:c4:d2:f8:2d:da:01:bd:a5:dc:54:c2:33:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:43:3B:55:78:1F:8B:45:7A:26:54:31:75:49:29:BD:70:6D:7E
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/gypDO1V4H4tFeiZUMXVJKb1wbX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:b0:37:e1:9a:18:df:68:f8:6d:5e:24:6e:a5:a9:81:27:53:
4f:16:9d:09:6e:8e:3a:74:0d:df:48:9c:11:49:32:8d:fd:6c:
89:1a:fe:59:3d:28:71:15:36:0b:47:bc:42:8a:d3:40:bc:4f:
b6:ff:f0:10:a4:9d:d8:12:fe:53:56:f6:0f:af:21:e6:4a:6d:
ef:33:b7:fa:de:c2:9d:01:8d:61:98:97:1f:4b:5f:6d:e6:2a:
9c:40:ef:f8:ab:27:4f:06:57:4e:83:6f:84:16:33:8b:8e:b0:
f3:e7:0c:26:69:49:e2:d7:d6:15:bc:80:b8:9f:e3:db:f8:55:
79:91:0c:01:7f:32:78:9c:42:cd:cf:aa:27:7c:a0:f6:95:05:
ea:a8:29:0b:e5:e2:d2:6b:af:95:bb:e3:04:e7:97:65:36:2a:
7f:a9:c4:34:b2:0d:37:7a:1e:28:ee:09:af:c8:b3:78:64:ef:
e7:c4:52:4c:ff:95:20:e4:d4:d5:39:5d:f7:19:1b:7a:25:f6:
d9:67:92:78:e1:88:0f:f2:12:4c:08:d4:a7:7d:28:68:0e:c7:
bb:59:12:fe:df:1c:ae:cf:22:f3:1b:f2:0a:bd:61:a3:1e:62:
12:f1:96:05:c2:33:64:6d:8b:44:0e:da:bf:a7:05:44:86:1a:
4b:13:61:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCj9q6xuhWDbAAcG/1MB8TVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwOTE1MDcyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzJhNDMzYjU1NzgxZjhiNDU3YTI2NTQzMTc1NDkyOWJkNzA2ZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVHK3ZpwL9S8g2qPzqfvpwc+/UnH
OWsgiQsGxBO6zOG+vHUean4stPgYKRp/n+3OAVIz3Lm6A2k5PSSk5uMc7qn/1Vmg
y6wRvCUfLNceeP/xA217KC3hN62Ksh5wmEf7c2VnWM4wRZibia+4OgqsBL1vK3fH
b7kUjMz+vVjajF69S8JXoSZT6HgxanY3mhEEm0vBZxobnEirbo9g86oqCP2KnnbM
iUr40bK70s/esVIpXmjFyK26gcFNZpC1K3J51uxRTB8EF7X3S5RLzujoFD9ODlU4
VwiXzV1+TTPlHiBiW13T2doKkA4MdTYvnYcjBejE0vgt2gG9pdxUwjOiowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMqQztVeB+LRXomVDF1SSm9cG1+MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEvZ3lwRE8xVjRINHRGZWlaVU1YVkpLYjF3Ylg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV0yAMA0G
CSqGSIb3DQEBCwUAA4IBAQBbsDfhmhjfaPhtXiRupamBJ1NPFp0Jbo46dA3fSJwR
STKN/WyJGv5ZPShxFTYLR7xCitNAvE+2//AQpJ3YEv5TVvYPryHmSm3vM7f63sKd
AY1hmJcfS19t5iqcQO/4qydPBldOg2+EFjOLjrDz5wwmaUni19YVvIC4n+Pb+FV5
kQwBfzJ4nELNz6onfKD2lQXqqCkL5eLSa6+Vu+ME55dlNip/qcQ0sg03eh4o7gmv
yLN4ZO/nxFJM/5Ug5NTVOV33GRt6JfbZZ5J44YgP8hJMCNSnfShoDse7WRL+3xyu
zyLzG/IKvWGjHmIS8ZYFwjNkbYtEDtq/pwVEhhpLE2HP
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:29:13 2026 by rpki-client